Unscored severity · published Jul 24, 2008
CVE-2008-3293
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter
–
CVSS
8.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.9% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EZ
Ezwebalbum · Ezwebalbum
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3293
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3293
securityreason.com
http://securityreason.com/securityalert/4034
www.securityfocus.com
http://www.securityfocus.com/archive/1/494573/100/0/threaded
Exploit
http://www.securityfocus.com/bid/30311
www.vupen.com
http://www.vupen.com/english/advisories/2008/2160/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43920
www.exploit-db.com
https://www.exploit-db.com/exploits/6112
More from Ezwebalbum
–
CVE-2008-3292
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via…